If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

Trojan.JS.Redirector.ar -- FALSE POSITIVE - Fixed

in about 15 mins I got over 5 alers saying that Zonealarm has quarantined different things and it keeps popping up, what do I do?
I'm using ZoneAlarm Security Suite version:9.1.008.000 and Windows XP
the name is: Trojan.JS.Redirector.ar.

And ZA have quarantined 5 of these, all located in Temporary Internet Files.
What to do? if I delete them, then a after a few mins I get new alerts that this tojan is quarantined...

TIA

Last edited by fax; January 25th, 2010 at 09:24 AM.
Reason: edited title to hint to solution

Trojan.JS.Redirector.ar -- false alarm???

Hi

My present ZAISS Anti-virus signature DAT file version is 1010384160.
Last night, to whichever (so-called) safe site I surfed using IE 8, everything was fine.
This morning, after updating my AV signature, I get the message I got Trojan.JS.Redirector.ar and I'm also told it is in the IE cache, named show_ads[1].js .
Can anybody tell me whether I am the only one getting this and if not, what it is all about?
How to cure?

Re: Trojan.JS.Redirector.ar -- false alarm???

Re: Trojan.JS.Redirector.ar -- It is a FALSE POSITIVE

It may be a false positive, but it seems to be a very persistent one, for after the latest update at 16:50 CET (Anti-virus signature DAT file version:1010390752), i.e. being more than 7 hours later than the one of this morning (09:24 CET), it is still there... And the update version number is still the same as well. Well, at least over here, on three computers.

Ananda

Last edited by ananda; January 25th, 2010 at 08:05 AM.
Reason: Updating time + more info

Re: Trojan.JS.Redirector.ar -- It is a FALSE POSITIVE

Originally Posted by Olep

in about 15 mins I got over 5 alers saying that Zonealarm has quarantined different things and it keeps popping up, what do I do?
I'm using ZoneAlarm Security Suite version:9.1.008.000 and Windows XP
the name is: Trojan.JS.Redirector.ar.

And ZA have quarantined 5 of these, all located in Temporary Internet Files.
What to do? if I delete them, then a after a few mins I get new alerts that this tojan is quarantined...

TIA

Same here, I think it came from hxxp://xxxxombia.proboards.com, early this morning. But typically, it seems to have been ignored since it was mentioned here in March of last year.

There is considerable mention on the internet, but no clear consensus if it's bogus, or not.

Seems I remember reading that ZA doesn't read this board, DUHHHHHH! Perhaps if they did it would not take months to resolve issues.

Re: Trojan.JS.Redirector.ar -- It is a FALSE POSITIVE

Re: Trojan.JS.Redirector.ar -- It is a FALSE POSITIVE

Norton,Kaspersky,ZA, and others are also reporting the same problem. It is false. Even if you go into your registry, and temp files where it says it is located there is nothing there. I would find it hard to believe the whole internet got trashed by yet another tird clown.